HOW TO HACK THE RIGOL DS2000 OSCILLOSCOPE!

[Armageddon]

Hi all!  
This application allows you to convert your DS2072 on a DS2102/DS2202, and enable all the extra options:

-Memory.
-Decode.
-Trigger.

Cheers,
Armageddon.


How to make the keygen?

mkdir MIRACL
cd MIRACL/
wget https://github.com/CertiVox/MIRACL/archive/master.zip
unzip -j -aa -L master.zip
bash linux (or bash linux64 if running 64bit OS)
gcc rikey.c -I ./ miracl.a -o rikey


How to use it?

./rikey <DSA2XXXXXXXXX> <OPTS>

where:
  <DSA2XXXXXXXXX> = serial number of the device
  <OPTS> = DSAx (Permanent Options) or VSAx (Temporary Options)


All Possible Options:

Code tabel: use DSAx for a official, and use VSAx for the a trial key

DSAx ( or VSAx) , 2202, 2102,  mem56, Decode, Trigger

x  200, 100, Mem, Dec, Trig

A   none
B   ==   ==   ==   ==   on
C   ==   ==   ==   on   ==
D   ==   ==   ==   on   on
E   ==   ==   on   ==   ==
F   ==   ==   on   ==   on
G   ==   ==   on   on   ==
H   ==   ==   on   on   on

Note: keys A..H wont change the model, only ADD an option.

2102:

J   ==   on   ==   ==   ==  
K   ==   on   ==   ==   on

[Gallymimu]

I've seen a couple of references on eevblog to these techniques working on the DS4000 series scopes.  Anyone know for sure?

Posted on: July 22, 2013, 05:47:48 05:47 - Automerged
you should also make available the "missing pieces" for this to work.  Who knows how long they will be publicly available.

[SB7]

What are the missing pieces ?

I quickly scanned the thread and I can see the "missing" private key in what the OP posted.  Looks to be complete, although I haven't  built /used it as I don't have a Rigol 'scope

[Armageddon]

With the permission of the author, the windows APP (see attached file).

[Gallymimu]

What are the missing pieces ?

I quickly scanned the thread and I can see the "missing" private key in what the OP posted.  Looks to be complete, although I haven't  built /used it as I don't have a Rigol 'scope

yeah the private key, if everything else is going to be posted here why not make it complete?!  PLUS as I said, who knows how long eevblog will continue to keep the key posted on their forum.

Posted on: July 23, 2013, 03:47:52 03:47 - Automerged
aw hell here it is.

[SB7]

Not to belabor the point,  I wasn't second guessing you, but the private key IS in what the OP posted.  That was my point... it was/is complete.

Armageddon, thanks for posting the windoze version.

[Gallymimu]

Not to belabor the point,  I wasn't second guessing you, but the private key IS in what the OP posted.  That was my point... it was/is complete.

Armageddon, thanks for posting the windoze version.

it was? did I miss it?  I thought it was only linked to eevblog.

[Armageddon]

Do not worry, because I have copies of everything, and for sure these are not definitive versions.  
Gallymimu:
  http://www.gotroot.ca/rigol/
  The private key is: "8EEBD4D04C3771"

[ptr]

Should any member here have questions about this scope i have limited experience with ds2072 so maybe i can help.

[Kroko]

My DS2072 is working perfectly as DS2202. Thanks to everybody who made this possible.

[sn00p]

We just bought a whole load of rigol stuff and I have to say I'm pretty impressed, especially with the scope.

I looked a few years back at the "cheaper" scopes and they were, well, cheap.  Flakey software, unintuative software and they also felt cheap.   The rigol stuff feels quality both in terms of software and physical feel.

The fact that it can be enhanced easily is a bonus too.

[Saber3239]

How about ds1000? It will update them?

[sarah90]

How about ds1000? It will update them?

The ds1000z and ds4000 series have also been hacked. You need other keys for them though. Check the link in reply #7.

[Gallymimu]

the cheap rigol power supply and function generator also have keygens.

http://www.riglol.3owl.com/

[Saber3239]

The ds1000z and ds4000 series have also been hacked. You need other keys for them though. Check the link in reply #7.

I see keys in post #7. Can we also increase bandwidth (from 70 to 100Mhz) for DS1000z?

[sarah90]

I see keys in post #7. Can we also increase bandwidth (from 70 to 100Mhz) for DS1000z?

No, the bandwidth is fixed in the 1000z series.

[Armageddon]

No, the bandwidth is fixed in the 1000z series.

Yes, 100MHz I think.

[Gallymimu]

Yes, 100MHz I think.

ds1000z comes in 70MHz and 100MHz.  I wouldn't be surprised if it could be modified, not through keygen, but maybe through firmware hack.  The 4000 series was just proven to be upgradeable through firmware modifications and the 2000 can be modified to 300MHz.

[zac]

ds1000z comes in 70MHz and 100MHz.  I wouldn't be surprised if it could be modified, not through keygen, but maybe through firmware hack.  The 4000 series was just proven to be upgradeable through firmware modifications and the 2000 can be modified to 300MHz.

Did you see an option to hack the bandwidth on the DS4000?    I didn't see it in the options:

DS4000 device options:
first character: D = official, V = trial
DSHB - RS232 Decoder
DSHC - SPI Decoder
DSHE - I2C Decoder
DSHJ - CAN Decode
DSHS - FlexRay Decoder
DSH9 - all options

[ur63]

Check this out

[Gallymimu]

Did you see an option to hack the bandwidth on the DS4000?    I didn't see it in the options:

It's not in the license key options, it's an alteration to the firmware itself that enables the higher bandwidths.

Posted on: December 07, 2013, 06:12:44 06:12 - Automerged

Check this out

Check what out?  This link was already posted publicly in reply #13 so you copy it into an attachement?  I don't get it.  Are you just spamming for posts?  

We need a thumbs down button

[ur63]

I guess I did not see that link was already posted or overlooked it - Apologies to the admins for that flaw.
I am not spamming for anything, rather just wanted to offer help!
Thanks for nice comment Gallymimu - hope you are flawless at any time.

[Gallymimu]

I guess I did not see that link was already posted or overlooked it - Apologies to the admins for that flaw.
I am not spamming for anything, rather just wanted to offer help!
Thanks for nice comment Gallymimu - hope you are flawless at any time.

sorry man, people here are just generally pretty strict and it keeps the forum quality high.  I get yelled at all the time.  Anyway wouldn't you be frustrated if you posted a link and then someone else posts the same thing in a file, and you go to the trouble to download it and find it's already been posted?  It's not like there are 1000 posts, just 20 to read before responding.  Other thing is that your post "check this out" isn't a very informative or helpful post.  Please tell us what you are posting and what it is for rather than having us guess what might be in your link.

-----------------

Back to Rigol news.  It's looking like fewer and fewer people are getting their hands on the DS2000 scopes and that the DS2000A are currently immune to the hack.  I'd imagine that it will be sorted out after a few more people get their hands on the DS2000A firmware to examine.

I've got a DS4012 coming tomorrow and I'm excited to see what it can do.

[sarah90]

Even more news on the 2000 scopes. New firmware is out for both A and non-A models. For the non-A models it is now possible to generate keys for CAN protocol decoding and 300MHz bandwidth  . Important downside of the new firmware is that it is no longer possible to activate the 50 ohm input termination on the v2 non-A models  . For the A models it is known that the key algorithm is similar but different from the non-A models. Major European distributors have sold out the non-A and are shipping A version as replacement from last week on.

[Binary1955]

My DS4054 Works perfectly with all options. Thanks to all who made ​​this possible.